Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: SAf9p/Qzpir/fmyhc/h6qtafMoZxgMHNgSTbK9en6bc=
Subject key identifier: 33:7E:89:C8:53:30:13:EB:99:C5:F3:CB:D9:5D:9B:C4:1C:AE:20:F4
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 019CAC47884A3160EB8841F242487CF8ADB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:01:34 +0000
Manifest this update: Mon 02 Mar 2026 02:01:34 +0000
Manifest next update: Tue 03 Mar 2026 02:01:34 +0000
Files and hashes: 1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: 5x/9foeikUZFJC9Rpa6AXla0ppsTLFmvcKVHzndxEiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:88:4a:31:60:eb:88:41:f2:42:48:7c:f8:ad:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Mar 2 02:01:34 2026 GMT
Not After : Mar 3 02:01:34 2026 GMT
Subject: CN=337e89c8533013eb99c5f3cbd95d9bc41cae20f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:42:d9:81:f7:49:ca:1c:ac:30:39:c6:97:
5e:b4:8b:4a:77:43:51:82:ab:d1:01:31:b8:3f:d4:
85:4d:0a:c0:b6:3d:00:f0:af:49:58:db:54:e2:2d:
56:c2:3d:ca:74:e7:1b:1c:a1:35:1f:04:1f:ae:1b:
02:d0:66:13:0f:13:d6:d0:1f:d0:a4:f8:d6:3e:d0:
c8:20:71:f6:04:8d:4e:82:b8:37:b2:52:4b:80:63:
1e:0f:c9:28:11:bd:f4:51:8d:26:c4:f4:6f:e1:9f:
8d:15:2f:aa:83:e5:d5:04:ea:3c:d4:30:53:a4:97:
b8:8c:f7:97:16:91:19:79:d3:83:2e:a2:b5:bf:d3:
cb:2c:07:f2:ae:8c:07:b1:1f:00:96:7b:98:9e:fb:
5e:b8:e7:4a:39:26:9f:85:da:32:88:69:28:da:2e:
b1:8f:44:2d:26:3d:45:d2:20:ce:cd:ca:8f:a8:43:
24:03:96:e9:d1:99:2c:29:8c:dc:84:f7:a9:3e:21:
66:d2:86:ef:a0:94:9b:bb:95:4b:be:8a:c2:e5:af:
5d:b5:bc:46:74:96:ed:a0:f2:25:83:9b:bb:64:d9:
94:4a:60:1e:7c:74:17:00:f8:3f:36:62:e7:45:d1:
53:a0:0c:0d:f7:a9:bc:5f:96:08:cf:d7:35:50:25:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7E:89:C8:53:30:13:EB:99:C5:F3:CB:D9:5D:9B:C4:1C:AE:20:F4
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5b:6f:fe:7f:a8:1f:b3:72:76:29:f8:59:31:26:bd:68:6b:
13:17:60:3c:61:aa:44:95:72:fe:6e:bd:da:16:da:0d:86:79:
69:24:7d:20:4b:7f:ea:96:9d:85:b3:a0:16:8e:98:2b:07:df:
12:fe:32:8f:1b:32:60:32:62:28:f7:58:a3:56:04:4c:3b:22:
19:c4:be:02:e5:c1:fe:95:43:95:55:a0:df:f3:ad:a2:ac:e5:
b6:c0:f8:f6:85:ba:8a:76:54:bc:01:7b:05:76:cb:f9:7d:e2:
f4:44:48:66:40:11:b9:fc:4f:c7:23:a8:35:34:d2:50:7a:e9:
ad:29:3a:e7:89:eb:7a:bb:2d:95:5e:49:ef:71:63:6d:c2:2b:
69:9f:06:b1:c0:41:63:ec:66:29:ef:1f:c1:39:73:b0:36:0a:
a4:f4:72:5e:aa:6f:1f:f9:c4:2e:75:18:ee:55:f5:c1:6c:09:
63:20:dc:67:d5:c8:ce:11:31:0c:1d:02:4e:14:6c:ba:c8:14:
b3:e0:00:21:d3:e6:fb:82:cb:09:7a:c5:06:71:5d:c7:fc:34:
04:5a:c5:35:f9:ea:6e:75:f3:94:b8:4a:9b:8d:86:99:62:30:
1f:2f:82:67:5d:ad:1f:2c:60:78:f4:65:c4:80:0a:f3:c8:27:
a1:ca:01:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:49 2026 by rpki-client